Extracted

• • Target

    timi4r.dll

  • Size

    1.7MB

  • MD5

    46eb374c45317e2624efe42e31fee2d9

  • SHA1

    672fd609e10cd3aebec3a1038bba93d934829dad

  • SHA256

    a7f6ba5b03ed8eb9a547a0a73f72095a8f0ef32f1419769f1d0be33da3bdbf60

  • SHA512

    7d99ae6b1bd06854e1ae363aa4ba2d388e69b0dd03571153b3358ec1bd63a8e18a62035c94dbde62c1bf061e83e97d6da5bf50f1587d044c4295f2786576ba95

  Score

  10^/10

  bumblebee1406revasiontrojan

  • BumbleBee

    BumbleBee is a webshell malware written in C++.

    trojanbumblebee

  • Enumerates VirtualBox registry keys

    evasion

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Looks for VirtualBox Guest Additions in registry

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  behavioral1behavioral2